Windows GDI+ Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

Windows GDI+ Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Universal Plug and Play upnp.dll allows an authorized attacker to elevate privileges locally...

MINI-HH5V-QPVR-96MX

Bulletin has no description...

MINI-C72M-VMQX-622Q

Bulletin has no description...

MINI-X276-F8C3-CP38

Bulletin has no description...

MINI-682C-8GVC-FRV8

Bulletin has no description...

Rockwell Automation 1715-AENTR EtherNet/IP Adapter

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device. 2. RECOMMENDED PRACTICES CISA recommends users...

EUVD-2026-43542

Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. User interaction is not required to...

PT-2026-58692

A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device...

PT-2026-58227

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

PT-2026-58367

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally...

PT-2026-58013

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit ha...

PT-2026-58689

Name of the Vulnerable Software and Affected Versions TP-Link Deco M5 version v1 Description The device uses a weak password hashing mechanism to store user credentials. An attacker with privileged access or who has compromised the system could obtain the password hash and perform dictionary or...

CVE-2025-43892: Buffer Over-read

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitti...

PT-2026-58694

A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings...

TRENDnet TEW-635BRM Start HTTPD Code Execution

The vulnerability of the starthttpd function of the Web Service component of TRENDnet TEW-635BRM software lies in the issue where the operation exceeds the buffer boundaries in memory when processing the devicename parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

CVE-2026-62655: Stack-based Buffer Overflow

A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable...

Malicious code in nodemon-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c506d75221403cde50b724defdd5c71441614ab87b54ff1ffa2a24af89678e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-15683

Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. User interaction is not required to...